$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/C-JKvrAGahPYvvc19hb2YtQLDFE.roa File: C-JKvrAGahPYvvc19hb2YtQLDFE.roa (raw, json) Hash identifier: jI4U3aEXAYZhQAyR0P1jlLuObGMxcwqO63MTuhpc3z4= Subject key identifier: 0B:E2:4A:BE:B0:06:6A:13:D8:BE:F7:35:F6:16:F6:62:D4:0B:0C:51 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B24 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C-JKvrAGahPYvvc19hb2YtQLDFE.roa Signing time: Fri 31 Jan 2025 01:38:00 +0000 ROA not before: Fri 31 Jan 2025 01:38:00 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2852 (0xb24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:38:00 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=0BE24ABEB0066A13D8BEF735F616F662D40B0C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ef:e9:61:4b:c6:da:af:d0:85:17:62:7a:0d: 76:bd:8a:c9:e1:0a:c5:7a:00:07:68:03:ac:aa:13: e5:ac:2b:66:4b:25:6a:b6:93:09:10:d4:56:2e:af: a3:1b:20:48:31:78:f4:48:e0:96:57:76:b2:75:25: c6:9a:a7:14:68:38:d3:1d:98:76:49:0d:c9:2a:22: d0:84:ae:fb:e8:9d:cf:af:55:4a:7b:c8:47:8f:bb: a9:25:0e:48:f7:7a:ac:c6:a6:a3:05:e7:31:53:f1: bd:58:8d:fe:03:6d:8c:77:f1:3d:7a:53:af:59:57: f4:0a:52:34:57:fa:38:e7:ed:87:84:79:1e:14:19: ed:b7:1c:d3:11:7b:c4:49:42:fd:c1:82:1f:2d:6c: 31:e2:02:fa:42:b0:43:e4:20:07:87:5f:b6:1d:db: 32:d1:d1:61:07:37:8c:9b:68:91:57:a7:db:4c:03: 46:56:89:57:55:9d:31:10:5c:fc:cd:16:81:7a:8c: d5:28:b2:52:6c:cb:40:89:b5:73:36:fc:24:3c:0c: 4a:8d:10:c0:93:a0:53:54:34:fc:f4:a1:01:ab:47: e4:bb:92:49:b4:c3:31:33:42:37:0a:98:d0:64:54: 63:98:e3:c8:fd:26:f1:77:6e:8b:6c:0d:40:95:1d: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E2:4A:BE:B0:06:6A:13:D8:BE:F7:35:F6:16:F6:62:D4:0B:0C:51 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C-JKvrAGahPYvvc19hb2YtQLDFE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.112.0/22 Signature Algorithm: sha256WithRSAEncryption d9:4f:54:d1:59:9b:8e:91:9e:00:7c:fa:87:8a:35:e9:80:31: 2e:3f:eb:ed:64:db:3c:ed:e5:32:c2:59:fa:e6:29:57:10:24: e5:01:83:cc:40:80:df:d1:73:67:72:63:19:ad:97:69:8f:c2: 1e:d9:26:f1:b6:bb:76:1a:17:bd:c0:fa:4f:c7:80:95:03:60: 01:9b:5c:7a:f4:39:2e:e5:a6:62:13:7f:8e:90:35:60:ab:b6: 5c:9c:87:a5:cb:b9:e7:60:52:af:bc:43:24:c3:51:40:92:58: 66:aa:14:c6:4f:c2:d9:e8:fe:28:30:02:99:75:b1:31:3b:cd: 84:8d:fa:5a:58:f9:6b:c4:9f:f2:3d:82:70:f7:d7:0a:e6:67: f9:fd:15:80:65:62:62:5d:e3:24:4d:b2:94:65:17:29:ff:7f: 60:cd:fb:54:94:ea:9c:64:d9:03:de:c3:75:41:f1:5f:97:97: 1f:6a:de:4f:80:84:65:89:08:48:3d:bd:c0:aa:70:e9:60:d2: eb:03:c4:0c:8a:20:cc:5b:77:61:1e:1d:f3:b7:79:7f:5e:64: 86:f6:a0:61:36:4a:20:3f:88:d6:84:e8:9e:86:9c:91:e4:b3: 12:04:e2:e1:33:3e:d9:6e:79:60:26:48:aa:67:8f:f7:9f:b8: 80:3e:10:af -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM4MDBaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBCRTI0QUJFQjAwNjZB MTNEOEJFRjczNUY2MTZGNjYyRDQwQjBDNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh7+lhS8bar9CFF2J6DXa9isnhCsV6AAdoA6yqE+WsK2ZLJWq2 kwkQ1FYur6MbIEgxePRI4JZXdrJ1JcaapxRoONMdmHZJDckqItCErvvonc+vVUp7 yEePu6klDkj3eqzGpqMF5zFT8b1Yjf4DbYx38T16U69ZV/QKUjRX+jjn7YeEeR4U Ge23HNMRe8RJQv3Bgh8tbDHiAvpCsEPkIAeHX7Yd2zLR0WEHN4ybaJFXp9tMA0ZW iVdVnTEQXPzNFoF6jNUoslJsy0CJtXM2/CQ8DEqNEMCToFNUNPz0oQGrR+S7kkm0 wzEzQjcKmNBkVGOY48j9JvF3botsDUCVHcxXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUC+JKvrAGahPYvvc19hb2YtQLDFEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0MtSkt2ckFHYWhQWXZ2YzE5aGIyWXRRTERGRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYXAwDQYJKoZIhvcNAQELBQADggEBANlPVNFZm46RngB8+oeKNemAMS4/ 6+1k2zzt5TLCWfrmKVcQJOUBg8xAgN/Rc2dyYxmtl2mPwh7ZJvG2u3YaF73A+k/H gJUDYAGbXHr0OS7lpmITf46QNWCrtlych6XLuedgUq+8QyTDUUCSWGaqFMZPwtno /igwApl1sTE7zYSN+lpY+WvEn/I9gnD31wrmZ/n9FYBlYmJd4yRNspRlFyn/f2DN +1SU6pxk2QPew3VB8V+Xlx9q3k+AhGWJCEg9vcCqcOlg0usDxAyKIMxbd2EeHfO3 eX9eZIb2oGE2SiA/iNaE6J6GnJHksxIE4uEzPtlueWAmSKpnj/efuIA+EK8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:24 2025 by rpki-client